SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 9

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.————————————————————————————————————————————–[Unveiling ‘sedexp’: A Stealthy Linux Malware Exploiting udev Rules](https://www.aon.com/en/insights/cyber-labs/unveiling-sedexp)[Malware infiltrates Pidgin messenger’s official plugin repository](https://www.bleepingcomputer.com/news/security/malware-infiltrates-pidgin-messengers-official-plugin-repository/)[HZ Rat backdoor for macOS attacks users of China’s DingTalk and WeChat](https://securelist.com/hz-rat-attacks-wechat-and-dingtalk/113513/)[BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks](https://blog.talosintelligence.com/blackbyte-blends-tried-and-true-tradecraft-with-newly-disclosed-vulnerabilities-to-support-ongoing-attacks/)[RansomHub ransomware-as-a-service](https://www.group-ib.com/blog/ransomhub-raas/)[StopRansomware: RansomHub Ransomware](https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-242a)[The Malware That Must Not Be Named: Suspected Espionage Campaign Delivers ‘Voldemort’](https://www.proofpoint.com/us/blog/threat-insight/malware-must-not-be-named-suspected-espionage-campaign-delivers-voldemort)[Malware Identification Method in Industrial Control Systems Based on Opcode2vec and CVAE-GAN](https://www.mdpi.com/1424-8220/24/17/5518)[Android Malware Detection Based on RGB Images and Multi-feature Fusion](https://arxiv.org/pdf/2408.16555)[Taking the Crossroads: The Versa Director Zero-Day Exploitation](https://blog.lumen.com/taking-the-crossroads-the-versa-director-zero-day-exploitation/)[Peach Sandstorm deploys new custom Tickler malware in long-running intelligence gathering operations](https://www.microsoft.com/en-us/security/blog/2024/08/28/peach-sandstorm-deploys-new-custom-tickler-malware-in-long-running-intelligence-gathering-operations/)[Beware the Unpatchable: Corona Mirai Botnet Spreads via Zero-Day](https://www.akamai.com/blog/security-research/2024-corona-mirai-botnet-infects-zero-day-sirt)[Linux Detection Engineering — A Sequel on Persistence Mechanism](https://www.elastic.co/security-labs/sequel-on-persistence-mechanisms)Follow me on Twitter: [**@securityaffairs**](https://twitter.com/securityaffairs) and [**Facebook**](https://www.facebook.com/sec.affairs) and [Mastodon](https://infosec.exchange/@securityaffairs)[**Pierluigi Paganin**](http://www.linkedin.com/pub/pierluigi-paganini/b/742/559)**(** [**SecurityAffairs**](http://securityaffairs.co/wordpress/)**–** **hacking, [newsletter](https://securityaffairs.com/167213/malware/security-affairs-malware-newsletter-round-7.html))**

Related Tags:
NAICS: 335 – Electrical Equipment

Appliance

Component Manufacturing

NAICS: 333 – Machinery Manufacturing

NAICS: 52 – Finance And Insurance

NAICS: 518 – Computing Infrastructure Providers

Data Processing

Web Hosting

Related Services

NAICS: 33 – Manufacturing – Metal

Electronics And Other

NAICS: 523 – Securities

Commodity Contracts

Other Financial Investments And Related Activities

NAICS: 51 – Information

Elfin

HOLMIUM

Associated Indicators: